Commit `f7136e4d4e`

f7136e4d4e92445a3e3ba5b748a6de39611d2659

parent: a57c7cd8f0

Unsigned

cmc <hello@cleberg.net> · 2026-08-07 08:38 UTC

Pin create-pull-request action to a commit SHA

SonarCloud (githubactions:S7637) flags third-party actions referenced by
mutable tag as a supply-chain risk; pin to the v7 commit SHA.

Layout: unified · split

.github/workflows/sync-man-pages.yml +1 −1

		@@ -40,7 +40,7 @@ jobs:
40	40	run: python3 scripts/sync_man_pages.py
41	41
42	42	- name: Open pull request on change
43		uses: peter-evans/create-pull-request@v7
	43	uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
44	44	with:
45	45	add-paths: Hutch/Resources/man-pages.json
46	46	branch: automated/man-page-catalog

Commit f7136e4d4e

Commit `f7136e4d4e`